# -*- coding: utf-8 -*-
# TencentBlueKing is pleased to support the open source community by making
# 蓝鲸智云 - PaaS 平台 (BlueKing - PaaS System) available.
# Copyright (C) 2017 THL A29 Limited, a Tencent company. All rights reserved.
# Licensed under the MIT License (the "License"); you may not use this file except
# in compliance with the License. You may obtain a copy of the License at
#
#     http://opensource.org/licenses/MIT
#
# Unless required by applicable law or agreed to in writing, software distributed under
# the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND,
# either express or implied. See the License for the specific language governing permissions and
# limitations under the License.
#
# We undertake not to change the open source license (MIT license) applicable
# to the current version of the project delivered to anyone in the future.

from django.db import models

from paasng.core.tenant.fields import tenant_id_field_factory
from paasng.platform.applications.constants import ApplicationRole
from paasng.platform.applications.models import ModuleEnvironment
from paasng.platform.environments.constants import EnvRoleOperation
from paasng.utils.models import TimestampedModel


class EnvRoleProtection(TimestampedModel):
    """模块环境角色保护

    限制应用角色在特定环境中执行特定操作，比如，禁止开发者在生产环境中部署应用。"""

    allowed_role = models.IntegerField(choices=ApplicationRole.get_django_choices())
    module_env = models.ForeignKey(ModuleEnvironment, on_delete=models.CASCADE, related_name="role_protections")
    operation = models.CharField(choices=EnvRoleOperation.get_choices(), max_length=64)

    tenant_id = tenant_id_field_factory()
